* Talk publication - Leveraging KVM as a Debugging Platform
@ 2019-10-30 17:53 Mathieu Tarral
2019-11-06 21:59 ` Konrad Rzeszutek Wilk
0 siblings, 1 reply; 2+ messages in thread
From: Mathieu Tarral @ 2019-10-30 17:53 UTC (permalink / raw)
To: kvm; +Cc: konrad.wilk, Tamas K Lengyel, patrick.colp, mdontu
Hi,
I wanted to publish a talk that I did last week at hack.lu 2019 conference in Luxembourg.
The talk was about showing the new introspection capabilities of KVM, still in development,
and plugging a "smart" GDB stub on top that would understand the guest execution context.
There are 2 demos:
1. I demonstrate the integration in LibVMI (intercepting CR3, memory events and MSR)
2. I demonstrate debugging Microsoft Paint inside a Windows 10 VM, setting a breakpoint
on NtWriteFile in the kernel, and avoid other processes's hits.
Abstract:
https://cfp.hack.lu/hacklu19/talk/MLPXAF/
Slides:
https://drive.google.com/file/d/1nFoCM62BWKSz2TKhNkrOjVwD8gP51VGK/view
Video:
https://www.youtube.com/watch?v=U-wDpvItPUU
Project:
https://github.com/Wenzel/pyvmidbg
I thought it might be interesting to share it with the KVM community.
Thanks.
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: Talk publication - Leveraging KVM as a Debugging Platform
2019-10-30 17:53 Talk publication - Leveraging KVM as a Debugging Platform Mathieu Tarral
@ 2019-11-06 21:59 ` Konrad Rzeszutek Wilk
0 siblings, 0 replies; 2+ messages in thread
From: Konrad Rzeszutek Wilk @ 2019-11-06 21:59 UTC (permalink / raw)
To: Mathieu Tarral; +Cc: kvm, Tamas K Lengyel, patrick.colp, mdontu
On Wed, Oct 30, 2019 at 05:53:31PM +0000, Mathieu Tarral wrote:
> Hi,
>
> I wanted to publish a talk that I did last week at hack.lu 2019 conference in Luxembourg.
That is neat! Thank you for sharing it!
>
> The talk was about showing the new introspection capabilities of KVM, still in development,
> and plugging a "smart" GDB stub on top that would understand the guest execution context.
>
> There are 2 demos:
> 1. I demonstrate the integration in LibVMI (intercepting CR3, memory events and MSR)
> 2. I demonstrate debugging Microsoft Paint inside a Windows 10 VM, setting a breakpoint
> on NtWriteFile in the kernel, and avoid other processes's hits.
>
> Abstract:
> https://cfp.hack.lu/hacklu19/talk/MLPXAF/
>
> Slides:
> https://drive.google.com/file/d/1nFoCM62BWKSz2TKhNkrOjVwD8gP51VGK/view
>
> Video:
> https://www.youtube.com/watch?v=U-wDpvItPUU
>
> Project:
> https://github.com/Wenzel/pyvmidbg
>
> I thought it might be interesting to share it with the KVM community.
>
> Thanks.
>
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2019-11-06 22:00 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2019-10-30 17:53 Talk publication - Leveraging KVM as a Debugging Platform Mathieu Tarral
2019-11-06 21:59 ` Konrad Rzeszutek Wilk
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.